Listing of the Claims 

1 . (currently amended) A method of determining a risk for fraud for an 
order, the method comprising: 

receiving an order from a customer; 

outsorting the order for placement in a separate queue from other orders 
for determining the risk for fraud: 

evaluating an order based upon indicators of possible high risk 
activities; 

determining a risk class for an order: 

evaluating all outsorted orders as high risk orders based upon indicators 
of possible high risk activites: 

evaluating all outsorted orders as medium risk orders based upon 
indicators of possible medium risk activites: and 

evaluating all outsorted orders as low risk orders based upon indicators 
of possible low risk activies. 

if the order is not classified oa a high risk order, then evaluating the 
order based upon indicators of possibl e m e dium risk activities; and 

if th e ord e r is not a m e dium risk activity, th e n classifying th e order ao a 
low risk order. 

2. (original) The method of claim 1, wherein a high risk order is 
evaluated with more time than a medium risk order. 
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3. (original) The method of claim 1, wherein a high risk order is 
evaluated with more resources than a medium risk order. 

4. (original) The method of claim 1, wherein a low risk order is 
evaluated with less resource than a high risk order and medium risk order. 

5. (original) The method of claim 1, wherein a low risk order is 
evaluated with less time than a high risk order and medium risk order. 

6. (original) The method of claim 1, wherein an indicator of possible 
high risk activities include at least one of: 

an order amount over a high risk amount threshold; 

a shipping address for the order to a particular high risk region; 

a non-domestic Internet Protocol address of the customer; 

a card verification number authorization code having a value 
from a first group of code values; 

an address verification code indicating a foreign credit card by 
the customer; and 

an order quantity over a high risk quantity threshold. 

7. (original) The method of claim 1, wherein an indicator of possible 
high risk activities further includes: 

an eFalcon score within a first range of values. 
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8. (original) The method of claim 1, wherein an indicator of possible 
medium risk activities include at least one of: 

an order amount over a medium risk amount threshold; 

an order for a particular designated product; 

a card verification number authorization code having a value 
from a second group of code values; 

an address verification code indicating a particular value from a 
group of CVN code values; 

a billing address differing from a shipping address; 

a shipping address to a medium risk region; and 

an order quantity over a medium risk quantity threshold. 

9. (original) The method of claim 1, wherein an indicator of possible 
medium risk activities further includes: 

an eFalcon score within a second range of values. 

10. (original) The method of claim 1, wherein the order is received in a 
website. 

11. (original) The method of claim 1, wherein the order is received in a 
call center. 



12. (original) The method of claim 1, wherein the order is an order for a 
product. 
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13. (original) The method of claim 1, wherein the order is an order for a 
service. 

14. (currently amended) An apparatus of determining a risk for fraud for 
an order, the method comprising: 

means for receiving an order from a customer; 

means for outsorting the order for placement in a separate queue from 
other orders for determining the risk for fraud: 

means for evaluating an order based upon indicators of possible high 
risk activities, wherein if the order is not classified as a high risk order, then 
evaluating the order based upon indicators of possible medium risk activities; 
and wherein if the order is not a medium risk activity, then classifying the order 
as a low risk order. 

15. (withdrawn) An article of manufacture, comprising: 

a machine-readable medium having stored thereon instructions to: 
receive an order from a customer; 

evaluate an order based upon indicators of possible high risk activities, 
wherein if the order is not classified as a high risk order, then evaluate the order 
based upon indicators of possible medium risk activities; and wherein if the 
order is not a medium risk activity, then classify the order as a low risk order. 
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16. (withdrawn) A method of dynamically adjusting indicators for 
detecting fraud based upon observed trends in fraud activities, the method 
comprising: 

analyzing observed trends in fraud activities; 

dynamically adjusting indicators of high risk related to fraud, based 
upon the observed trends; and 

dynamically adjusting indicators of medium risk related to fraud, based 
upon the observed trends. 

17. (withdrawn) The method of claim 16, wherein an indicator of high 
risk related to fraud include at least one of: 

an order amount over a high risk amount threshold; 

a shipping address for the order to a particular high risk region; 

a non-domestic Internet Protocol address of the customer; 

a card verification number authorization code having a value from a first 
group of code values; 

an address verification code indicating a foreign credit card by the 
customer; and 

an order quantity over a high risk quantity threshold. 

18. (withdrawn) The method of claim 16, wherein an indicator of high 
risk related to fraud further includes: 

an eFalcon score within a first range of values. 
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19. (withdrawn) The method of claim 16, wherein an indicator of 
medium risk related to fraud include at least one of: 

an order amount over a medium risk amount threshold; 
an order for a particular designated product; 

a card verification number authorization code having a value from a 
second group of code values; 

an address verification code indicating a particular value from a group of 
CVN code values; 

a billing address differing from a shipping address; 

a shipping address to a medium risk region; and 

an order quantity over a medium risk quantity threshold. 

20. (withdrawn) The method of claim 16, wherein an indicator of 
medium risk related to fraud further includes: 

an eFalcon score within a second range of values. 

21. (withdrawn) An apparatus for determining a risk for fraud for an 
order, the apparatus comprising: 

a server configured to permit an analyst to evaluate an order based upon 
indicators of possible high risk activities; 

wherein if the order is not classified as a high risk order, then the order 
is evaluated based upon indicators of possible medium risk activities; and 

wherein if the order is not classified as a medium risk activity, then the 
order is classified as a low risk order. 
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22. (withdrawn) The apparatus of claim 21, wherein a high risk order is 
evaluated with more time than a medium risk order. 

23. (withdrawn) The apparatus of claim 21, wherein a high risk order is 
evaluated with more resources than a medium risk order. 

24. (withdrawn) The apparatus of claim 21, wherein a low risk order is 
evaluated with less resource than a high risk order and medium risk order. 

25. (withdrawn) The apparatus of claim 21, v^erein a low risk order is 
evaluated with less time than a high risk order and medium risk order. 

26. (withdrawn) The apparatus of claim 21, wherein an indicator of 
possible high risk activities include at least one of: 

an order amount over a high risk amount threshold; 

a shipping address for the order to a particular high risk region; 

a non-domestic Internet Protocol address of the customer; 

a card verification number authorization code having a value from a first 
group of code values; 

an address verification code indicating a foreign credit card by the 
customer; and 

an order quantity over a high risk quantity threshold. 
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27. (withdrawn) The apparatus of claim 21, wherein an indicator of 
possible high risk activities further includes: 

an eFalcon score within a first range of values. 

28. (withdrawn) The apparatus of claim 21, wherein an indicator of 
possible medium risk activities include at least one of: 

an order amount over a medium risk amount threshold; 
an order for a particular designated product; 

a card verification number authorization code having a value from a 
second group of code values; 

an address verification code indicating a particular value from a group of 
CVN code values; 

a billing address differing from a shipping address; 

a shipping address to a medium risk region; and 

an order quantity over a medium risk quantity threshold. 

29. (withdrawn) The apparatus of claim 21, wherein an indicator of 
possible medium risk activities further includes; 

an eFalcon score v/ithin a second range of values. 

30. (withdrawn) The apparatus of claim 21, v^erein the order is 
received in a website. 
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31. (withdrawn) The apparatus of claim 21, wherein the order is 
received in a call center. 

32. (withdrawn) The apparatus of claim 21, wherein the order is an order 
for a product. 

33. (withdrawn) The apparatus of claim 21, wherein the order is an order 
for a service. 

34. (new) The method of claim 1, wherein outsorting is by randomly 
picking incoming orders. 

35. (new) The method of claim 1, wherein outsorting is based upon one 
or more criteria predefmed by a user. 
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